Merge pull request #9 from leanstacks/feature/issue-8

Docker HSTS and NGINX

Dockerfile

@@ -1,5 +1,5 @@
 # Start with nginx alpine
-FROM nginx:1.14-alpine
+FROM nginx:1.15-alpine
 # Copy nginx configuration file(s)
 COPY etc/nginx/*.conf /etc/nginx/conf.d/
 # Remove default nginx configuration file

etc/nginx/spa.conf

@@ -1,13 +1,16 @@
 # Basic NGINX configuration for a Single-Page Application (SPA)
 server {
-  listen       80;
-  server_name  localhost;
+  listen 80 default_server;
+  listen [::]:80 default_server;
+
+  # HSTS - Add HSTS header to all responses
+  add_header Strict-Transport-Security "max-age=600; includeSubDomains" always;
 
   location / {
-    root        /usr/share/nginx/html;
-    index       index.html index.htm;
+    root /usr/share/nginx/html;
+    index index.html index.htm;
 
     # This try_files statement facilitates SPA framework routing
-    try_files   $uri $uri/ /index.html;
+    try_files $uri $uri/ /index.html;
   }
 }